Pod workload identity to retrieve secret

Hello Ihsen Alaya,

Welcome to the Microsoft Q&A and thank you for posting your questions here.

I understand that you would like to secure the file share's key with Azure Key Vault and Azure file share will be as a Persistent Volume Claim (PVC) in Azure Kubernetes Service (AKS).

There are many long steps to might need to do, from creating and configure Azure Key Vault, Configure AKS to Access Azure Key Vault, and create a Persistent Volume (PV) and Persistent Volume Claim (PVC), You will also need to create a Secret Provider Class (SPC) which will define how the secrets from Azure Key Vault should be presented to your pods: https://learn.microsoft.com/en-us/azure/aks/azure-csi-files-storage-provision

Then, you will use the Secrets Store CSI Driver to natively retrieve secret contents from Azure Key Vault. This driver securely provides secrets to the requesting pods: https://learn.microsoft.com/en-us/azure/aks/developer-best-practices-pod-security

Here you have more detailed steps on how to use the Azure Key Vault provider for Secrets Store CSI Driver in an Azure Kubernetes Service (AKS) cluster: https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-driver

Accept Answer

I hope this is helpful! Do not hesitate to let me know if you have any other questions.

** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful ** so that others in the community facing similar issues can easily find the solution.

Best Regards,

Sina Salam